This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft File: 5xSoFJfIF3hoy7TNszjD72zp6VM.mft (raw, json) Hash identifier: PFN68im3cdiecsWvMPtHS3Hfj9YWMaRYFv2zEERd3hU= Subject key identifier: B2:1D:F0:E3:C8:60:A1:14:F7:13:40:70:83:0A:18:B3:32:9C:12:06 Authority key identifier: E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 Certificate issuer: /CN=A9172C8D/serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Certificate serial: 0AAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft Manifest number: 0AA4 Signing time: Sat 06 Dec 2025 18:47:24 +0000 Manifest this update: Sat 06 Dec 2025 18:47:23 +0000 Manifest next update: Sat 13 Dec 2025 18:47:23 +0000 Files and hashes: 1: 5xSoFJfIF3hoy7TNszjD72zp6VM.crl (hash: UZai/Nk2e2frGgVrtjkSZv5L6reUjv8DbLVp/GuurDs=) 2: 9085F6C0B78911EFB9994180C4F9AE02.roa (hash: FRaS1A9IeDGVweRTufxmQCe2ACl515gPhut7regZgoE=) 3: CDD96B60B78911EF9BD3EF80C4F9AE02.roa (hash: B5nwJ+mLBFnNT/8YSuFnlodEj+j6B/8srfS67vX0m7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2735 (0xaaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172C8D, serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Validity Not Before: Dec 6 18:47:23 2025 GMT Not After : Dec 13 18:47:23 2025 GMT Subject: CN=69347a3c-cae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:83:a7:e9:43:7b:56:08:e9:e4:c2:cb:6f:61: 66:f0:7d:e4:d9:4d:7a:ee:b3:72:5e:86:c9:8f:9b: 5e:64:4e:eb:21:a5:ce:9f:88:d4:c1:24:c8:d1:6e: 0c:85:8d:54:86:68:44:e1:3c:b7:c7:65:bc:ef:a3: b4:da:5f:1d:6d:5e:a3:7f:7c:1a:b4:03:7c:e6:64: f5:28:b0:b5:88:e1:70:e0:15:6b:95:e0:c1:a4:5f: c8:77:25:a7:20:cb:58:45:bf:85:ba:8e:27:a1:af: 9f:f8:bf:b6:9a:92:ea:b0:c4:18:64:de:22:40:e1: 0a:1a:71:5d:9f:e3:92:99:9c:fb:a5:0a:55:eb:68: a3:94:78:69:f3:bb:5e:0b:c4:68:1f:fd:de:da:b8: e9:53:c5:c1:b3:1f:73:7b:5c:ae:e0:71:74:73:08: 87:d7:35:0c:60:cc:52:82:35:5a:4a:9e:24:e6:6c: 7d:ba:9c:c2:29:1a:e0:82:48:dc:c3:8f:7e:b5:cd: 92:d0:09:0d:9e:5e:c3:c9:66:1a:5d:04:e2:02:2b: 9b:9f:9d:25:23:37:e9:df:0f:85:68:8f:3a:87:30: 29:37:2d:c6:54:ae:10:79:b9:f3:44:0f:1b:a6:90: 93:e5:1f:49:4c:25:0c:b7:2b:25:15:72:35:28:76: 52:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1D:F0:E3:C8:60:A1:14:F7:13:40:70:83:0A:18:B3:32:9C:12:06 X509v3 Authority Key Identifier: keyid:E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:3a:ac:e3:da:c6:06:4a:78:05:4a:a0:aa:d4:fe:74:9f:79: 12:bc:89:10:f2:b2:f9:d0:90:f3:fb:b7:5b:c9:13:72:37:5f: b3:85:a1:19:d7:4f:e7:2a:e4:7c:6f:11:64:ca:3c:66:f5:73: 61:30:2a:bc:f3:e0:fb:59:79:4b:c0:cf:b3:d1:a1:96:7d:6d: 14:85:2a:ba:8c:6d:ec:0d:af:c0:f3:dc:23:a3:2b:51:2e:64: c0:4d:4a:ce:73:bd:ea:11:09:48:e3:e5:f4:66:f2:74:1a:55: 50:e7:fb:e6:81:90:48:4a:5b:54:d7:1e:88:a3:8b:73:1f:37: f1:52:e0:bf:67:cf:30:af:0b:6b:43:ae:cc:39:aa:a7:5c:8d: 5e:95:e3:fa:13:f6:b3:f1:e0:e0:b0:96:a8:e1:c0:27:23:bd: f6:de:bd:1a:87:e0:6e:20:af:89:60:5c:51:2e:9c:a1:ea:e0: 5d:f5:1f:4f:25:f1:f2:a3:42:18:2d:f5:5b:f9:28:ed:ee:31: 23:93:57:7e:1a:2d:be:73:3f:61:64:df:9e:5e:c5:89:16:73: 8c:4a:8e:c6:79:fe:06:0b:7c:04:57:ff:d3:fc:0a:7b:c4:08: 13:12:27:49:b6:83:d3:dc:6a:5e:28:13:47:5b:d0:cf:0d:ff: 86:c3:d5:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDOEQxMTAvBgNVBAUTKEU3MTRBODE0OTdDODE3Nzg2OENCQjRDREIzMzhDM0VG NkNFOUU5NTMwHhcNMjUxMjA2MTg0NzIzWhcNMjUxMjEzMTg0NzIzWjAYMRYwFAYD VQQDEw02OTM0N2EzYy1jYWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIOn6UN7Vgjp5MLLb2Fm8H3k2U167rNyXobJj5teZE7rIaXOn4jUwSTI0W4M hY1UhmhE4Ty3x2W876O02l8dbV6jf3watAN85mT1KLC1iOFw4BVrleDBpF/IdyWn IMtYRb+Fuo4noa+f+L+2mpLqsMQYZN4iQOEKGnFdn+OSmZz7pQpV62ijlHhp87te C8RoH/3e2rjpU8XBsx9ze1yu4HF0cwiH1zUMYMxSgjVaSp4k5mx9upzCKRrggkjc w49+tc2S0AkNnl7DyWYaXQTiAiubn50lIzfp3w+FaI86hzApNy3GVK4QebnzRA8b ppCT5R9JTCUMtyslFXI1KHZS/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLId8OPI YKEU9xNAcIMKGLMynBIGMB8GA1UdIwQYMBaAFOcUqBSXyBd4aMu0zbM4w+9s6elT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkM4RC85QTExMDg2NDY5 QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYzaG95N1ROc3pqRDcyenA2 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV4U29GSmZJRjNob3k3VE5zempENzJ6cDZWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkM4RC85QTExMDg2NDY5QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYz aG95N1ROc3pqRDcyenA2Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfOqzj2sYGSngFSqCq1P50n3kSvIkQ8rL50JDz+7dbyRNyN1+zhaEZ 10/nKuR8bxFkyjxm9XNhMCq88+D7WXlLwM+z0aGWfW0UhSq6jG3sDa/A89wjoytR LmTATUrOc73qEQlI4+X0ZvJ0GlVQ5/vmgZBISltU1x6Io4tzHzfxUuC/Z88wrwtr Q67MOaqnXI1eleP6E/az8eDgsJao4cAnI7323r0ah+BuIK+JYFxRLpyh6uBd9R9P JfHyo0IYLfVb+Sjt7jEjk1d+Gi2+cz9hZN+eXsWJFnOMSo7Gef4GC3wEV//T/Ap7 xAgTEidJtoPT3GpeKBNHW9DPDf+Gw9Xx -----END CERTIFICATE-----Generated at Sun Dec 7 00:42:06 2025 by rpki-client